PinPop Privacy Policy

Effective date: September 9, 2026

PinPop, Inc. ("PinPop," "we," "us") provides a location-based social networking app for iOS. This policy explains what information we collect, how we use it, who receives it, and the rights and controls you have. It applies to the PinPop app and related services, which are offered publicly only in the United States and only to people 18 or older. A small, invitation-only beta program through Apple's TestFlight may include testers in other countries; Section 1 explains how this policy applies to them.

Questions or requests: privacy@pinpop.app

The short version

• PinPop shows your live location to friends you choose. Live sharing uses your most recent position. Separately, journey recording collects a detailed route and movement history; when you confirm saving and syncing a journey, we store it with your account. AI search also uses location context, as explained below.
• We do not sell your personal information, and we do not share it for advertising. There are no ads in PinPop, and we do not track you across other companies' apps or websites.
• PinPop does not record voice calls, and our voice provider is configured not to record or retain call audio. For channel calls, we keep basic call records (who, when, how long) for one year.
• We do not access your contacts. We do not use facial recognition. We do not run video calls.
• Some features send limited data to providers that work for us (for example, map rendering and AI search). We list the providers that receive personal information below.
• You can request account deletion from inside the app at any time. Access is disabled immediately, and account cleanup begins after 30 days. Some information remains, including messages in existing conversations, uploads, and limited account and enforcement records, as explained in Section 10.

1. Who we are and what this policy covers

PinPop, Inc. is the company responsible for your information. PinPop is publicly available in the United States, on iOS only, for people 18 and older. This policy covers the PinPop app, our servers, and the service providers that process information on our behalf. It does not cover other companies' services that you may reach from PinPop (for example, a website linked in a chat message).

Beta testing through TestFlight. Before and alongside our public launch, we run a small, invitation-only beta program through Apple's TestFlight, which may include invited testers outside the United States. Beta participation is free and for testing purposes only. If you are a beta tester, this policy applies to you in full, wherever you are: the same collection practices, the same protections, and the same rights, which you can exercise as described in Section 11 regardless of where you live. Beta builds may be unstable, and beta data may be reset. If you participate, Apple's TestFlight also shares your beta feedback with us (your email address, feedback text, screenshots you submit, and crash logs), which we use only to improve the app. When the beta program ends, or when you leave it, you can delete your account in the app or ask us to delete your information at privacy@pinpop.app, and we will delete our copies under the deletion terms of this policy; Apple retains TestFlight feedback under its own terms. The beta program is not an offer of the Service to the public outside the United States.

2. Information we collect

We collect the following categories of information. For each, the "Retention" section below states how long we keep it.

Information you provide:

• Account information: email address, phone number, username, and your date of birth (used, with your permission, alongside Apple's Declared Age Range signal to confirm you are 18 or older). Your username is visible to other users.
• Profile information: display name, profile photo, and bio. Profile information is visible to other users.
• Content you create: messages, group chat posts, photos and videos, and items you favorite (such as GIFs). Content you post publicly (for example, photos attached to public places or routes) is visible to anyone on PinPop; chat content is visible only to its participants.
• Journeys you record and save: detailed GPS paths, recorded addresses and timestamps, start and end times, distance, duration, speed (including top speed), acceleration, lean, G-force, and other motion-derived measurements. Recording gathers this data on your device. Saving and syncing stores the journey with your account after an in-app confirmation. Section 3 explains preview processing and sharing.
• AI conversations and personalization memory: your AI search requests, conversation history, attachments, and saved information about your preferences, constraints, and facts you share. The assistant may summarize these into persistent memory to personalize future answers, without a separate request to remember each fact. See Section 6.
• Connections and settings: your friends list, the message channels you belong to, and your app settings and preferences (such as location-sharing and notification choices).
• Nearby discovery: when Offline Connectivity is enabled, the app discovers nearby PinPop user IDs, including non-friends. Recently Met stores these IDs and encounter dates on your device for seven days, as described in Section 4.
• Support communications: emails and in-app requests you send us, including takedown requests, place claims, and data requests.

Information collected automatically:

• Precise location: your device's GPS position, collected with your permission, to show you on the map to friends you choose and provide location-based features. Live sharing uses your most recent position. Saved journeys contain historical location and movement data, and AI search processes location context as described in Sections 3 and 6.
• Approximate location: a coarse version of your position used for the same features.
• Live-sharing activity and device information: while location sharing is active, we collect your direction of travel (heading), speed, battery level, connected Bluetooth-device name, navigation destination, active call or channel status, and when navigation or the call began. We also receive distance travelled over the previous 1, 5, 15, and 30 minutes. These details accompany live-location updates for Live Map and social features; Section 3 explains which are shared with other users.
• Device information: device model, iOS version, push notification tokens (including VoIP push tokens used to ring incoming calls), and crash reports.
• Usage information: limited app analytics through Apple and through the Mapbox map software in the app.
• Call records: for channel voice calls, we keep who participated, when, and for how long. We do not keep call audio (see Section 4).
• IP addresses: our servers receive your IP address whenever the app talks to them, as all internet services do. We do not keep application logs of IP addresses. Our hosting providers may retain infrastructure-level connection logs for short periods under their own schedules. Service providers that receive your IP address to deliver their service include Clerk, Apple, TomTom, and Mapbox, and, when you use those features, KLIPY and OpenWeather.

Information from other sources:

• Apple age signal: Apple's Declared Age Range, shared with your permission, used to support our 18+ requirement.
• Public place information: we gather publicly available information about places in the world (names, addresses, coordinates, descriptions, and public posts about those places) from public web sources and public APIs such as Wikimedia, NASA, USGS, and Esri. This information is about places and is not linked to PinPop user accounts. It may include information that people who are not PinPop users have posted publicly (for example, a business owner's public name or a public review); Section 6 explains how anyone can ask us to remove such information.

What we do not collect: we do not access your contacts or address book. We do not collect advertising identifiers (IDFA/AAID). We do not use facial recognition or collect biometric information. We do not record calls.

3. Location: how it works and your controls

Location is the heart of PinPop, so it gets its own section.

• Permission first. PinPop collects precise location only after you grant location permission through iOS and turn on sharing in a dedicated in-app screen that explains who will see your position and what we store, with a separate control to enable sharing. Turning sharing on is your consent.
• Who can see you. Live sharing makes your position available to accepted friends and participants in social events where live sharing is active. Updates include your heading, speed, battery level, navigation destination, active call or channel status, and when navigation or the call began. This applies to both online and supported direct offline sharing. Blocking someone removes your location from their map, and theirs from yours (see Section 5 for how blocking works in shared channels).
• Information not shared in live updates to other users. Your connected Bluetooth-device name and rolling travel-distance totals are sent to PinPop but are not included in the live updates delivered to other users. Our hosting providers process this information when handling those requests.
• Live sharing and saved journeys are different. Live sharing updates your most recent position as you move. Journey recording separately gathers a detailed route and movement history on your device. When you select Save Journey and confirm the Save and Sync Journey? alert, the app uploads and stores that journey with your account. Saving from a sharing action and saving edits also show a confirmation. The alert describes the route, speed, acceleration, lean, G-force, and other motion-derived metrics being synchronized. Journey data may include recorded addresses, timestamps, and measurement-quality information. Encrypted backups of our database are retained for 7 days and then deleted.
• Journey previews and visibility. For a completed journey linked to a route, the app may send the journey data to our servers before you save it to request a leaderboard preview. This preview does not save the journey to your account. Saved journeys may be accessed through shared links; route-linked journeys can also contribute to route leaderboards and expose journey details and statistics to other users. The save confirmation explains when your time and statistics will be public. Stopping live sharing does not delete previously saved journeys or AI search history.
• Turning it off. You can stop sharing at any time in the app's settings or by revoking location permission in iOS. Withdrawing permission is as easy as granting it.
• Service providers that process location. Our hosting and real-time delivery providers process live-sharing information to receive and deliver updates, and Redis Cloud caches the location and activity details shared with other users. TomTom processes coordinates for route calculation and Mapbox for map display; these map services do not receive every field in a live-sharing update simply because you use Live Map. If you use AI search or weather features, see Section 6. Our service providers are listed in Section 8.
• We do not sell your location, and we do not share it for advertising. No advertiser, data broker, or ad network receives your location from PinPop, precise or approximate.

California residents: precise geolocation is "sensitive personal information" under California law. We collect it with your permission and use it only to provide the services you request. We do not use or disclose sensitive personal information for purposes that would require a "Limit the Use of My Sensitive Personal Information" option; if that ever changes, we will provide that option as the law requires.

Residents of states that require opt-in consent for precise geolocation: the in-app location screen described above is that consent, and you may withdraw it at any time as described above.

4. Messages, calls, and media

• Direct messages and group chats. In channels identified in the app as encrypted, message content and uploaded chat attachments are end-to-end encrypted on participants' devices. PinPop stores and delivers encrypted copies (ciphertext) and does not hold the private keys needed to read that content. Messages in channels without end-to-end encryption are protected in transit and at rest, but PinPop can process their content to provide the service. Chat content is visible to its participants, who may copy or share what they receive. You can delete your messages at any time. If you delete your account, messages you already sent remain visible to their recipients as part of their conversations.
• Voice calls are available in group message channels and online proximity chat. Channel calls are limited to channel members; proximity chat connects nearby users, including non-friends. Calls are live and transient: PinPop does not record calls, and our voice provider is configured not to record or retain call audio. We cannot prevent another participant from recording a call with a separate device; doing so violates our Community Guidelines and may be illegal where they live. Call audio is carried by LiveKit Cloud, our real-time voice provider, which routes audio through its nearest server node for call quality. That routing can occur on infrastructure outside the United States. LiveKit receives room and participant identifiers and keeps session telemetry for a limited period under its own retention policy; it cannot link those identifiers to your name or contact details. For channel calls, we keep call records (participants, time, duration) for one year for reliability, safety, and abuse investigation.
• Online proximity chat. When you join, your device sends its current location to PinPop to select nearby microphones and adjust their volume by distance. Up to 16 voices can be selected at once, including people you do not know. Participants can hear what you share while your microphone is on. Proximity chat does not show your precise position on other users' maps or grant them live-location access; the separate Location Sharing rules in Section 3 still apply. We keep proximity membership and location in a short-lived cache while you are joined and clear them when you leave or your updates expire. You can leave from the call screen.
• Offline proximity calls and messages. PinPop includes a peer-to-peer mode that connects nearby devices over supported local-network and peer-to-peer connections when Offline Connectivity and the necessary device permissions are enabled. Direct messages, synchronization, and other data transfers are encrypted using TLS 1.3; direct call audio is encrypted using DTLS 1.2. Both devices authenticate using PinPop-issued certificates before exchanging application content, and the app checks whether the peer is an allowed connection. Messages delivered this way sync to our servers when connectivity returns and are then stored and treated like other messages. PinPop does not record direct call audio; another participant may still record with a separate device.
• Nearby discovery and Recently Met. When you enable Offline Connectivity, nearby PinPop users, including non-friends, can discover your user ID and service availability. You may appear in each other's Nearby Non-Friends and Recently Met lists. Discovery uses PinPop user IDs rather than email addresses or phone numbers. Recently Met keeps encountered user IDs and encounter dates on your device for seven days; this record does not include GPS coordinates. You can stop nearby discovery by turning off Offline Connectivity in Settings. This does not immediately clear existing Recently Met entries on your device or other users' devices; those entries follow the seven-day retention period.
• Photos and videos you share in chats are kept for 6 months. Content you post publicly stays up until you delete it. Removing a post or deleting your account does not itself erase its underlying uploaded files; see Section 10. Public uploads are screened before publication by an automated safety system (see Section 5).
• Message metadata. End-to-end encryption protects message content, but does not hide all information about a conversation from PinPop. We process account, device, channel, and participant identifiers; message timestamps; delivery and read status; reactions; reply references; and file-delivery information, including file sizes, to deliver messages, synchronize conversations, and operate the service.
• Encrypted history recovery. Participants' devices may upload additional encrypted copies of message content so their history can be recovered when local message data is unavailable. These copies are associated with the user's account and message records and can be opened only with the matching recovery key held on the device. PinPop does not hold that key and cannot restore readable history if it is lost. These copies follow the message-retention terms in Section 10.
• Encryption and its scope. Content sent through our servers is encrypted in transit, and our databases, caches, and media storage are encrypted at rest. End-to-end encrypted messages remain encrypted when delivered offline or synchronized to our servers. The transport encryption used for voice calls is separate: an encrypted message channel does not by itself make its voice calls end-to-end encrypted. Public content remains public when linked from an encrypted conversation. If you choose to submit screenshots or other message content with a report, we can read the evidence you submit, as explained in Section 5.

5. Safety, moderation, and enforcement

PinPop has content and conduct rules, and systems to enforce them:

• Reporting users and content. You can report a user from their profile for spam, harassment, abusive messages or calls, reckless or dangerous riding, or other violations. We receive the reported account, the description you submit, and any screenshots or other evidence you choose to attach. A user report does not automatically include your conversation history. We use reports to investigate concerns and enforce our Community Guidelines. When investigating a riding-conduct report, we may also review the reported account's public content and, where relevant, its saved journey information and live-sharing activity already held under this policy. Public content can also be reported using its report action.
• Blocking. You can block anyone from their profile or from any conversation. Blocking stays in effect until you unblock them. You no longer see each other's live location, and notifications from the blocked user are suppressed. Blocking does not remove either person from shared group channels, where messages and calls remain possible. You can leave a shared channel in one tap.
• Automated screening. Images and text submitted for public view (such as place photos, public posts, and profile pictures) are screened before publication by OpenAI's safety tools, acting as our service provider. We ask for permission to run these checks during registration as part of the AI Data Sharing consent.
• Safety and ban enforcement after deletion. To help prevent banned users from returning and protect against repeated abuse, we retain protected hashes of email addresses and phone numbers, where provided, together with limited account and ban records. These hashes do not reveal your contact details directly, but allow us to recognize the same details if they are used again. We retain these records indefinitely, including for accounts that have not been banned. Deleting an account does not itself prevent you from registering again; active or permanent bans still apply. Reports and blocks are removed during account cleanup.

6. AI, weather, and search features

• AI map search. When you use AI search, we send OpenAI your search text, relevant conversation history, images you attach, current coordinates and address, and local date and time. To answer your request, the assistant may also use saved AI memory and information from your bookmarks and saved journeys. We ask for permission during registration; existing accounts without recorded consent are asked before their first AI search. You can turn the feature off in settings. We keep your AI search sessions in your account until you delete your account.
• Personalization memory. During AI search, the assistant can create, update, and use private memory linked to your account, including preferences, dislikes, recurring search constraints, recommendation style, and facts or ongoing context you provide. This can happen automatically when the assistant considers information useful for future interactions; you do not have to say "remember this" each time. Memory is stored separately from individual conversations and supplied to OpenAI for future answers. You can ask the assistant to correct or forget saved information, or contact privacy@pinpop.app. Turning off AI search stops future use through that feature but does not itself erase existing memory or conversation records. Memory remains until cleared or removed during account cleanup. The assistant is instructed not to infer sensitive traits or save credentials or exact live locations; information you choose to share, such as dietary, allergy, or accessibility needs, can nevertheless be personal or sensitive.
• OpenAI processing and retention. We use OpenAI's standard API; we do not have an approved Zero Data Retention arrangement. OpenAI does not use API inputs or outputs to train its models by default. To make repeated requests faster and less costly, prompt caching may retain encrypted representations of portions of the input for up to 24 hours. This cache limit is separate from other retention: our AI search currently enables response storage, for which OpenAI documents retention of at least 30 days. OpenAI may also retain prompts, responses, and related safety information in abuse-monitoring logs for up to 30 days, or longer when required by law or reasonably necessary to protect its services or others from harm. Images flagged as potentially involving child sexual abuse may be retained for manual review. These provider retention practices also apply as relevant to the API features used for public-content screening in Section 5. Turning off AI search or deleting your PinPop account does not immediately erase data still subject to these provider retention periods. See OpenAI's data controls and prompt-caching documentation.
• Search research and address context. AI search uses Perplexity to gather public web results and identify the geographic context of an address, such as its building, neighborhood, or nearby landmarks, to improve place-search accuracy. For the address lookup, our server sends the address associated with your current location without attaching your PinPop user ID, name, email, or phone number. That address can still reveal a precise location, so we do not describe it as anonymous. Other research queries are generated by the assistant and can include relevant details from your request and location context; they are not guaranteed to exclude words you typed or personal details you included. Requests are sent through our server rather than directly from your device. We cache the address-context result with coordinates under your account for up to one hour to avoid repeating nearby lookups. Perplexity states that its Chat Completions API does not retain prompt or response content or use it for model training; it retains operational billing metadata such as token counts, model, request timing, and API-key identification. See Perplexity's API privacy documentation.
• Place index. Public place information (Section 2) is stored with machine-generated embeddings in our search index, hosted by Elastic Cloud, so search works. This index is about places. It may include public posts and names from people who are not PinPop users; anyone may request removal at privacy@pinpop.app, and items that disappear from their public source are removed at the next refresh of our index, which runs on a 3-month cycle.
• Weather. Weather features send your coordinates directly from your device to OpenWeather and to Apple's Weather service to fetch the local forecast. We do not store these requests. OpenWeather states that it does not store request locations or IP addresses.
• GIF search. GIF search sends your search terms and your device's IP address to KLIPY, a GIF content provider. These requests carry only a fixed app-level label; we send KLIPY no user, account, or session identifiers. GIFs you favorite are saved to your account until you unfavorite them or delete your account.

7. How we use information

We use the information above to: provide the map, messaging, calling, journey recording, synchronization, sharing, and ranking features you request; personalize AI search using conversation context and saved memory; keep you signed in and secure your account; process subscription payments; send notifications you have enabled; maintain safety through moderation, blocking, and enforcement; fix bugs and improve reliability using crash and usage data; respond to your support and legal requests; and comply with law. We do not use your information for advertising. Automated systems screen public uploads before publication and help enforce our age requirement; a person reviews appeals. We do not use automated decision-making that produces legal or similarly significant effects about you.

8. When we share information

We share personal information only in these situations:

• With other users, as you direct: your profile, public posts, messages to their recipients, and saved journeys through sharing and route leaderboards. Live location and accompanying activity details are shared with accepted friends and relevant social-event participants as described in Section 3; Bluetooth-device names and rolling travel-distance totals are not included in those live updates. When Offline Connectivity is enabled, nearby discovery also exposes an account identifier and service availability as described in Section 4.
• With service providers under contract, who may use it only to provide their service to us: Amazon Web Services (hosting and storage), Microsoft Azure (application compute and real-time transit), TomTom (routing), Mapbox (maps), Redis Cloud (caching), Clerk (sign-in), LiveKit Cloud (voice transport), OpenAI (AI search and content screening), Perplexity (web research and address context), Elastic Cloud (place search index), and Apify (automated collection of public place information). Clerk also acts as an independent controller for its own account-security and fraud-prevention purposes, under its own privacy policy. Section 6 describes the information sent to Perplexity.
• With independent providers that process limited data under their own privacy policies: Apple (notifications, crash reporting, age signal, and App Store billing), OpenWeather and Apple Weather (weather requests), and KLIPY (GIF search). We minimize what these providers receive, as described above.
• For legal reasons: to comply with law, enforceable governmental requests, or valid legal process; to enforce our terms; or to protect the rights, safety, or property of PinPop, our users, or the public.
• In a business transfer: if PinPop is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy's commitments.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We have not done either in the preceding 12 months. We do not track you across other companies' apps or websites. Because we do not sell or share personal information and do not use it for targeted advertising, honoring an opt-out signal requires no change to our practices: we honor Global Privacy Control signals as a request to opt out of sale and sharing, and no further action is needed because those practices do not occur at PinPop.

9. Where your information is stored

Your information is stored and processed in the United States and in other countries. Our own infrastructure runs on AWS in the United States, Japan (Tokyo), and Germany (Frankfurt), including backups and replicas, with database backups retained for 7 days; our caching layer and its backups are in the United States; application traffic passes through Microsoft Azure infrastructure in the United States, Southeast Asia, and Germany; our place-search index is hosted on Elastic Cloud in Ireland; and call audio may be routed through LiveKit's global infrastructure as described in Section 4. Each provider named in Section 8 processes data in the regions described in its own privacy documentation, including outside the United States. Wherever your information is processed, this policy, our contracts with service providers, and the independent providers' own privacy commitments protect it.

10. How long we keep information

When you delete your account, we disable access and hide your profile immediately. After 30 days, we begin deleting your account information and associated content, including saved journeys, AI conversations and memory, and preferences. We aim to complete deletion within 45 days of your request, except for information retained as described in this section. Backups follow the schedule in Section 9.

Continuity of service. Messages, shared files, channels, and participation records may remain after you delete your account so other participants can continue using their conversations and shared content. Your profile is replaced with a deleted-user label, while a limited internal account record remains. Content you shared may still contain personal information. You can delete messages using the available controls before deleting your account, or contact privacy@pinpop.app to request help removing specific content, subject to applicable rights and exceptions.

Unused temporary uploads are deleted automatically. Files already used in content are not automatically erased when you delete your account. Other users' independently owned content is unaffected. We also retain limited safety records as described in Section 5, and payment providers retain records required for their own obligations.

11. Your rights and choices

We extend the rights in this section to every PinPop user, wherever you live, as a matter of policy; where your local law gives you additional rights, we will respond as that law requires. These rights include:

• Know and access the personal information we hold about you, including a portable copy;
• Delete your personal information (subject to the exceptions in Section 10);
• Correct inaccurate personal information;
• Opt out of sales, sharing, targeted advertising, and significant profiling. PinPop does not do these things, so there is nothing to opt out of;
• Limit sensitive personal information (California): see Section 3;
• Non-discrimination: we do not treat you worse for exercising a privacy right.

How to exercise them: use the in-app controls (Settings, including account deletion) or email privacy@pinpop.app. We will verify requests using your account credentials or, where needed, additional information used only for verification, and respond within 45 days (extendable once by 45 days where the law allows, with notice). An authorized agent may submit requests for you with proof of authorization. If we deny a privacy request, you may appeal the denial by replying to our decision; we will respond within the period your state's law requires, and if the appeal is denied, you may contact your state Attorney General where your state provides that path. (Appeals of content or account enforcement decisions are separate and are described in our Terms of Service and Community Guidelines.)

California residents: the Appendix at the end of this policy provides the disclosures required by California law, organized by California's statutory categories.

12. Age requirement

PinPop is for adults 18 and older. We use, with your permission, Apple's Declared Age Range signal together with your date-of-birth attestation to enforce this, and we do not knowingly collect personal information from anyone under 18. If we determine that an account belongs to someone under 18, we disable the account and delete its personal information, including enforcement records, except where law requires otherwise. If you believe a minor is using PinPop, contact privacy@pinpop.app.

13. Security

We protect your information with encryption in transit, encryption at rest on our systems, access controls that restrict internal access to personal information (including precise location) to authorized personnel for operations and safety purposes, and contractual security obligations for our service providers, alongside the independent providers' own security commitments. Encrypted message channels also use end-to-end encryption as described in Section 4. Direct offline content uses TLS or DTLS with certificate-based peer authentication; nearby discovery information is separate from encrypted content. No internet service can guarantee perfect security. We do not record calls, upload contacts, or collect advertising identifiers; saved journeys and AI records contain the personal information described in this policy.

14. If something goes wrong

If a security breach affects your personal information, we will notify you and the relevant authorities as required by applicable breach notification law, without unreasonable delay.

15. Changes to this policy

When we make material changes to this policy, we will notify you in the app before the changes take effect and update the effective date above. Material changes that affect how we handle information already collected will apply only after notice, and where the law requires, with your renewed consent.

16. Contact us

PinPop Inc

30 Otis St, Apt 2509

San Francisco, CA 94103-1990

United States

privacy@pinpop.app

We are happy to answer questions about this policy or your information.

Appendix: California Privacy Notice

This Appendix supplements the policy above for California residents and provides the disclosures required by the California Consumer Privacy Act as amended (CCPA/CPRA), organized by California's statutory categories of personal information. It covers our practices in the preceding 12 months and currently.

Categories of personal information we collect:

Provider roles are described in Section 8: service providers and contractors may use information only to provide their service to us, while independent providers process limited information under their own privacy policies. Clerk also acts as an independent controller for its own account-security and fraud-prevention purposes. The table also identifies disclosures to other users and nearby devices.

Sale and sharing: we have not sold personal information and have not shared it for cross-context behavioral advertising in the preceding 12 months, and we do not do so now, including the personal information of anyone under 16 (PinPop is 18+ only).

Sensitive personal information: we use the sensitive categories listed in row L to provide the services you request and maintain security and integrity. AI personalization is described in Section 6; the assistant is instructed not to infer protected or sensitive traits.

Retention: the retention period for each category is stated in Section 10 of this policy.

Your rights (know/access, delete, correct, portability, opt out of sale/sharing, limit sensitive personal information, non-discrimination) and how to exercise them, including verification, authorized agents, response timing, and appeals, are described in Section 11. Because we do not sell or share personal information, no opt-out link is required; we honor Global Privacy Control signals as described in Section 8.

Search research queries: our server sends Perplexity address context and generated research queries without attaching PinPop account identifiers. The content can nevertheless contain location and personal information, as described in Section 6.

Financial incentives: we do not offer financial incentives or price or service differences in exchange for personal information.

"Shine the Light" (Cal. Civ. Code 1798.83): we do not disclose personal information to third parties for their own direct marketing purposes.